diff --git a/src/util-privs.c b/src/util-privs.c index 5ce6843eb7d..bed5889b9ad 100644 --- a/src/util-privs.c +++ b/src/util-privs.c @@ -74,9 +74,10 @@ void SCDropMainThreadCaps(uint32_t userid, uint32_t groupid) CAP_NET_ADMIN, CAP_NET_RAW, CAP_SYS_NICE, -1); break; + case RUNMODE_NFLOG: case RUNMODE_NFQ: capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED, - CAP_NET_ADMIN, /* needed for nfqueue inline mode */ + CAP_NET_ADMIN, /* needed for nflog and nfqueue inline mode */ CAP_SYS_NICE, -1); break;